Hitachi Energy RTU500 series
view advisory published 2023-08-08
Successful exploitation of these vulnerabilities could cause a buffer overflow and reboot of the product.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-4608US | high7.5 | — | ||
A vulnerability exists in HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product. The vulnerability can only be exploited, if the HCI 60870-5-104 is… | ||||
| CVE-2022-2502US | high7.5 | — | ||
A vulnerability exists in the HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product. The vulnerability can only be exploited, if the HCI 60870-5-10… | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-23-220-02 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-23-220-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (4)
- MitigationRTU500 Series CMU
Do not use process control systems for internet surfing, instant messaging, or receiving emails.
- MitigationRTU500 Series CMU
Do not use process control systems for internet surfing, instant messaging, or receiving emails.
- FixedRTU500 Series CMU
Hitachi Energy recommends users update to CMU Firmware versions 13.3.3 or 13.4.1.
- FixedRTU500 Series CMU
Hitachi Energy recommends users update to CMU Firmware versions 13.3.3 or 13.4.1.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan